www.galatone.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b5:6d:3c:e4:61:73:26:a2:2c:86:f6:98:52:c3:4a:18:0f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.galatone.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:6d:3c:e4:61:73:26:a2:2c:86:f6:98:52:c3:4a:18:0f
Serial Number (int): 410185454161193075270790478292042379827215
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5b:2d:83:fb:53:42:2d:f1:07:13:6b:79:84:d0:d1:92:25:95:82:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:d1:75:f4:01:57:bd:14:3f:b4:c0:3b:23:54:49:57:b5:d4:ff:a8
Fingerprint (sha256): 7a:aa:c0:a7:70:c8:1c:8d:d3:87:3b:08:b5:3a:17:b1:2d:c3:da:f8:8a:e0:62:0b:0b:a1:cb:d0:cd:17:4e:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.galatone.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.galatone.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.galatone.org

Other certificates including the domain name galatone.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.galatone.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410185454161193075270790478292042379827215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 20:55:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 20:55:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.galatone.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694943405778936768956031816816375385971155995705997605231705186160294024454741499287383861406203612638783627773025722469569176855790761770461610875224154981243021726645653040977529215254277121586852673570789812718985635754743234730207359103939347393216459640719597031941414893229272002824076475197195592659235396790323016310069619988856906941824079066662141808761765146916705149638654572226370311601104870692537454748204220763784579310088028976255712265353912989234877742663522593237586398064170596218062768074601782109384495633394028982425623099133411186172044252650243846966884686507169047016007239487751074397835976383910307831827759560051563573952372757514682884996988378960062026057520040807399536071056408407771458751620702426462193610157294779172570369893901688043876362593350972371788251645062192826326969289275269563642366946099823954264384798485859838584188844779518114745777720737073782384059420163712971577266886675958225019142069275844183196921462978461369800099163633384805022161137819070426157377983632578135806773971922789660582416215255914968795029923614189461972164189579267369848908107207386637470980234929708786359922179048709608997075206618635056765175610897570476413106363091603745467639890346425819863418704119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b2d83fb53422df107136b7984d0d19225958284
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galatone.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017007e694210000040300473045022035f45fec50fdc3e79c4ecd85823bff8b0a11ff892c6e4c6fddf0b95584b455d0022100a140d0baabb167603ebf6dcb5c4c50e0a687faa95637153e035350ceb7970a2c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017007e696070000040300473045022047e71cb1ed5428b4bcdad0f2047b1511029357e088948a75fbf88af7bc71d9c0022100a4f53fb6fd54f830f80a9ad51d495fc0af3c20ed0a62e6b3dd8edfa515acaeea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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